IRS Enterprise Data Platform control stack

{
  "_id": "starintel:observation:irs-edp-control-stack",
  "assessment": {
    "confidence": 0.98,
    "gaps": [
      "Whether the 2025 Unified API order inherited the exact EDP authorization boundary and consumer approvals is unresolved."
    ],
    "impact": 1.0,
    "relevance": 1.0
  },
  "data": {
    "method": "Primary-source PIA extraction",
    "observation_type": "documented_data_platform_control_stack",
    "observed_at": "2026-07-26T01:45:00Z",
    "observer_id": "starintel:actor:gpt-5-6-thinking",
    "subject_id": "starintel:org:internal-revenue-service",
    "value": {
      "advanced_analytics": {
        "export_permitted": false,
        "use_scope": "internal IRS statistical, machine-learning and AI analysis"
      },
      "audit_logging": [
        "AWS CloudTrail",
        "AppDynamics",
        "Databricks workspace logs",
        "Databricks account logs"
      ],
      "authorization": {
        "approvals": [
          "system entitlement",
          "Form 14664 or Form 14665 live-data waiver where applicable"
        ],
        "identity_system": "BEARS"
      },
      "contractor_access": {
        "roles": [
          "read-only",
          "administrator",
          "developer read/write",
          "tester"
        ],
        "screening": "moderate-risk public-trust background investigation"
      },
      "data_classes": [
        "taxpayer account data",
        "tax returns",
        "information returns",
        "audit and compliance data",
        "public records"
      ],
      "immuta": {
        "controls": [
          "PII masking",
          "negative-TIN filtering",
          "centralized policy definitions",
          "policy pushdown to data stores"
        ],
        "logging": "AWS tracking logs forwarded to IRS Splunk"
      },
      "named_interfaces": [
        "IMF",
        "BMF",
        "CADE2",
        "IRDB",
        "EPMF",
        "MTRDB",
        "DDB",
        "CDDB",
        "FATCA",
        "Direct File",
        "Clean Energy API",
        "DOE API",
        "NTIN",
        "Splunk"
      ],
      "platform": "Enterprise Data Platform"
    }
  },
  "dataset": "palantir-deep-dive-2026-07-25",
  "date_added": "2026-07-26T01:45:00Z",
  "date_updated": "2026-07-26T01:45:00Z",
  "dtype": "observation",
  "evidence": [],
  "schema_version": "0.9.0",
  "sources": [
    {
      "credibility": 0.99,
      "kind": "government_primary",
      "publisher": "Internal Revenue Service",
      "retrieved_at": "2026-07-26T01:45:00Z",
      "title": "Enterprise Data Platform Privacy Impact Assessment",
      "url": "https://www.irs.gov/pub/irs-pia/edp-pia.pdf"
    },
    {
      "credibility": 0.99,
      "kind": "government_primary",
      "publisher": "Internal Revenue Service",
      "retrieved_at": "2026-07-26T01:45:00Z",
      "title": "Enterprise Data Platform Advanced Analytics Platform Privacy Impact Assessment",
      "url": "https://www.irs.gov/pub/irs-pia/edp-aap-pia.pdf"
    },
    {
      "credibility": 0.99,
      "kind": "government_primary",
      "publisher": "Internal Revenue Service",
      "retrieved_at": "2026-07-26T01:45:00Z",
      "title": "Enterprise Data Platform Immuta Privacy Impact Assessment",
      "url": "https://www.irs.gov/pub/irs-pia/edp-i-pia.pdf"
    }
  ],
  "summary": "IRS privacy assessments document source-system coverage, access approvals, contractor roles, audit logging, analytical export restrictions and Immuta masking/filtering.",
  "title": "IRS Enterprise Data Platform control stack",
  "version": 1
}